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Social Survival Skills 



• Hunting 

• Fighting 

• Clothes making 

• Basket weaving 
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Rate of Change 



1922 -12.6 million cars in the world - NY Times 
•1970 - 37s million cars in the world - Worldmapper 

• 48 years^X-^regsst^SS^ 

• 1990 3 million Internet users - Worldmapper 
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2010 2.05 billion Internet users - lnternetwolrdstats.com 
20 years - 683X more internet users 



Social Engineering 



\YS\\^^i\\\ 



As old as civilization 

Risky tSXMBBiPbtWmSS^: 

Phone calls could be traced 

Slow and expensive to send mail 

Not generally scalable to mass attacks 

Not a pervasive threat 
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educational investment 



ame Changer 



Relative anonymity - Reduced risk of getting caught 
Unseen victims - Reduced moral compunction 
Virtually zero cost to perform attacks 
Low individual loss doesn't cross 
International issues hinder prosecution 
Technology became ubiquitous faster than society 
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The Stark Reality 






Cyberctfl^^ free means to attack 

over a billion users 



we see 



over a Diuion users^^^^^^r: 

Much, if not most, of the 0|lpj 
involve social engineering^^ 

Social engineering attacks are costly and pervasive 

Social engineering defensive education is not a part 
I education s>^ 






What it's going to take 






We are at least 2 generations away from pervasive education 
Educational attempts to date have generally been ineffective 
A generation of teachers will need to learn how to teach 
Curriculum must begin no later than 1st grade 
Education must continue throii^Ji high school 
Focused training for social engineering attacks is required 
You have to train your employees now! 






Anti-Phishing Education 

Carnegie Mellon Researchers Fight 
Phishing Attacks with Phishing Tactics 

Early findings by Carnegie Mellon University researchers 
suggest that people who are suckered by a spoof email into 
visiting a counterfeit Web site are also people who are 
ready to learn their lesson about "phishing" attacks. 

...64 percent of phishing emails identified by the embedded 
training group versus 7 percent identified by the other two 
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Out on a tangent 
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• The quantum angle 

• Rup^rt§|l§i^ak§!^"morphogenetic field" 

• Each specie^s^^l^iind" 

• Habits and behaviors build up in a species through 



See "A New Science of Life^T#fe more on M-Fields 
• But even if we disregard this... 



The Fear of Training 



"What if we train our employees and they leave?" 

To which noted leadership consultant Mark Sanborn replies 

"What if we don't and they stay?" 

Of course the answer to that fea^ST 
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Top Federal Lab Hacked in Spear-Phishing Attack 

ByKirnZetterE3 April 20, 2011 | 1:16 am | Categories: Breaches, Crime, Hacks and Cracks 

The Oak Ridge National Laboratory was forced to disconnect internet access for workers on Friday after 
the federal facility was hacked, and administrators discovered data being siphoned from a sen/er. 



Only a "few megabytes" of data were stolen before the lab discovered the breach and cut internet 
access to prevent further exfiltration from the sensitive government facility, according to Thomas 
Zacharia, deputy director of the lab. 
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|wh pediatric cardiac surgery department, creating a regulatory nightmare for 
the hospital. 



Technology is Important 



Yes you do need security products 
Yes you do need policy 

Education is often required to understand policy 
Education increases the efficacy of security products 
Defense in depth strategies require multiple layers of 
technology, policy, and educatid$|S 
Crime is a social problems^* v «s* 
Technology rarely, if ever, solves social problems 



ESET Offers Technology Solutions 



• Award winning proactive antivirus 

• Pioneer in the field of heuristics 

• Multi-platform sup|^t^^)ttdtr^[ Windows, Linux, Mac, Solaris 

• Multi-endpoint support including mobile, virtual, server, 
workstation, more ^^ NN 1^ 

• Single Management Console ^\\^^Ws 

• Come to the ESET booth to arrange a free business trial 
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ESET is an Educational Leader 



The ESET lead "Securing Our eCity" is an award winning 
educational effort that includes collaboration from over 
200 public and private sector stake holders. 

Securing Our eCity was recognized by the Department of 
Homeland Security for the Best Local/Community Plan in 
their National Cybersecurity Awareness Challenge 

Come to http://www.securingourecity.org to see for 
information on free educational workshops 







